United States of America: California Privacy Protection Agency investigation into S&P Global over alleged failure to register as a data broker (No. ENF25-220-D-SP)

Progress

Current status
in force
30 Dec 2025 in force

Scope

Implementers
United States of America
Policy Area
Authorisation, registration and licensing
Policy Instrument
Business registration requirement
Regulated Economic Activity
other service provider
Government Branch
executive
Government Body
data protection authority
Implementation Level
subnational

Timeline of events

30 Dec 2025
in force

California Privacy Protection Agency issued USD 62'600 fine against S&P Global for failure to register as data broker

On 30 December 2025, the Board of the California Privacy Protection Agency (CPPA) issued a USD 62'600 fine against S&P Global, a New York-based data and technology provider, for failure to register as data broker by the legal deadline. In addition t…

Event type investigation
Action type ruling
Government branch executive
Government body data protection authority